This site is the Shield LLM demo. This page explains which personal data it processes, why, and how to exercise your rights.
Data controller
The data controller is Sami Essouri, acting in a personal capacity.
For any question about your data, or to exercise your rights, write to: privacy@shield-llm.com
Data we collect
- Contact form: your email address, your message and, if you give it, your name.
- Demo account: your name, your email address, your password (stored as a hash, never in plain text), the targets you scan and the reports they produce.
- Technical data: your IP address and the pages you request, in the server logs, and technical errors, recorded without IP address or cookies.
Purposes and legal bases
- Replying to your contact request: legitimate interest in answering the people who write to us, or pre-contractual steps if you are considering Shield LLM.
- Providing and running your demo account: pre-contractual steps taken at your request.
- Keeping the site secure and working, and fixing errors: legitimate interest.
- Measuring the site's audience in aggregate, without cookies and without identifying visitors: legitimate interest.
Your data is never sold or used for advertising.
Recipients
Only the data controller has access to your data. The following providers process it on the controller's behalf, solely for the service described:
- Hetzner Online GmbH: hosting of the site and its database, in Germany.
- Resend (Plus Five Five, Inc.): sending emails (contact form, sign-in), from the European Union (Ireland).
- Sentry (Functional Software, Inc.): technical error tracking, with data hosted in the European Union (Germany).
- Plausible Insights OÜ: cookieless audience measurement, hosted in the European Union.
Resend and Sentry are US companies. Any transfer to the United States is covered by the EU-US Data Privacy Framework and by the European Commission's standard contractual clauses.
Retention
- Contact form messages: 3 years after our last exchange.
- Demo account: for the length of the evaluation, then deleted, or sooner on request.
- Server logs: erased automatically by rotation (at most 50 MB per service).
Cookies
The site only uses the cookies it needs to work: your sign-in session and your chosen language. No advertising or audience-measurement cookies.
Your rights
You can ask to access, correct or erase your data, to receive it in a portable format, or to restrict its processing, and you can object to processing based on legitimate interest. Write to the address above; we reply within one month.
If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).